NIST's new password rules – summary (nakedsecurity.sophos.com)

The primary source: https://pages.nist.gov/800-63-3/sp800-63-3.html

I've been telling people to use correct-horse-battery-staples for years. Glad to see I'm not the only professional thinking this.